Back to Database
Status published
Medium
CVE-2018-17287
In Kofax Front Office Server Administration Console 4.1.1.11.0.5212, some fields,...
Vulnerability Description
In Kofax Front Office Server Administration Console 4.1.1.11.0.5212, some fields, such as passwords, are obfuscated in the front-end, but the cleartext value can be exfiltrated by using the back-end "download" feature, as demonstrated by an mfp.password downloadsettingvalue operation.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-17287
Credits & Attribution
No credits recorded in the NVD database.
More from kofax
View All →CVE-2022-25090
Printix Secure Cloud Print Management through 1.3.1106.0 creates a temporary...
High
8.1
CVE-2022-25089
Printix Secure Cloud Print Management through 1.3.1106.0 incorrectly uses Privileged...
Critical
9.8
CVE-2018-17289
An XML external entity (XXE) vulnerability in Kofax Front Office...
Medium
6.5
CVE-2018-17288
Kofax Front Office Server version 4.1.1.11.0.5212 (both Thin Client and...
Medium
5.4
CVE-2011-5294
The SaveMessage method in the LEADeMail.LEADSmtp.20 ActiveX control in LTCML14n.dll...
Medium
6.4
Affected Vendor
kofax
View all reports →Affected Software
front office server
Vulnerable Versions:
4.1.1.11.0.5212
Timeline
Official Publish:
April 18th, 2019
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.